{"name":"evaluate_tool_risk","title":"Preflight a third-party tool","description":"Make a contextual allow, review, or block decision before an AI Agent installs or invokes a third-party tool registered in 404.directory. Use this immediately before installation or first use, and again when permissions, data sensitivity, execution mode, or evidence changes. The decision cites ownership, lifecycle, verification history and freshness, compatibility, security, and observed-usage evidence; missing evidence never counts as safe. Stores a bounded receipt without prompts or payloads and returns a one-time outcome token so the Agent can later report whether it proceeded, changed tools, requested review, or aborted. Does not execute or freshly probe the target and is not a security guarantee.","use_when":"Make a contextual allow, review, or block decision before an AI Agent installs or invokes a third-party tool registered in 404.directory. Use this immediately before installation or first use, and again when permissions, data sensitivity, execution mode, or evidence changes. The decision cites ownership, lifecycle, verification history and freshness, compatibility, security, and observed-usage evidence; missing evidence never counts as safe. Stores a bounded receipt without prompts or payloads and returns a one-time outcome token so the Agent can later report whether it proceeded, changed tools, requested review, or aborted. Does not execute or freshly probe the target and is not a security guarantee.","href":"/tools/evaluate_tool_risk","kind":"404_service_tool","version":"0.10.2","input_schema":{"type":"object","properties":{"target":{"type":"string","minLength":1,"maxLength":128,"description":"404.directory catalog tool UUID or slug."},"action":{"type":"string","enum":["inspect","install","invoke"],"description":"The next action the Agent is considering: inspect, install, or invoke."},"data_sensitivity":{"default":"public","description":"Highest sensitivity of data the Agent may expose to the tool.","type":"string","enum":["public","internal","confidential","restricted"]},"execution_mode":{"default":"supervised","description":"Whether a human supervises this action or it runs unattended.","type":"string","enum":["supervised","unattended"]},"permissions":{"default":[],"description":"Permissions or side effects needed for this action. Include every applicable value.","maxItems":8,"type":"array","items":{"type":"string","enum":["public_network","local_files_read","local_files_write","credentials","personal_data","code_execution","payments","destructive_actions"]}}},"required":["target","action"],"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false},"invocation":{"mcp":{"endpoint":"/mcp","method":"tools/call","name":"evaluate_tool_risk"},"rest":{"method":"POST","path":"/v1/evaluations","input_mapping":"Send the MCP arguments as the JSON body."}}}